Windows 10: Data Execution Prevention DEP breaks applications

We have a compliance requirement to turn on Data Execution Prevention on Windows 10.

We are supposed to roll it out like in this document:

https://www.stigviewer.com/stig/windows_10/2017-12-01/finding/V-77091

Issues experienced: Turning this on broke our ticketing system TrackIt, Our patch deployment PDQ Deploy and Inventory, PowerShell ISE.

How can I turn this on and make my compliance objective without breaking these applications?


Also is there a group policy setting for this?

:)

 

Data Execution Prevention, wtf is this

Shadowrun keeps crashing and telling me

Data Execution Prevention (DEP) is a security feature that can help prevent damage to your computer from viruses and other security threats. Harmful programs can try to attack Windows by attempting to run (also known as execute) code from system memory locations reserved for Windows and other authorized programs. These types of attacks can harm your programs and files.

DEP can help protect your computer by monitoring your programs to make sure that they use system memory safely. If DEP notices a program on your computer using memory incorrectly, it closes the program and notifies you.


How can I stop this?

 

Data Execution Prevention (DEP) security feature

My internet will kick off and gives me a
Go online to learn about the Data Execution Prevention (DEP) security feature . It will crash constantly saying I have a potentially dangerous add on, but when I follow the link to learn more about it, all the information
is from 2010. I have Windows 10 and IE 11 on this computer.

 

Data Execution Prevention, wtf is this

control panel > system and maintenance > system > advanced system settings

choose "settings" under "Performance"

choose the Data Execution Prevention tab

choose "turn on DEP for essential windows programs and services only"


=========================================================


to turn OFF DEP bring up the command prompt and type this:

bcdedit.exe /set {current} nx AlwaysOff

the entire thing just like that

reboot and it should be off

should be.....

to turn back on, this:

bcdedit.exe /set {current} nx AlwaysOn


and you may want to check the settings in the first step above again once back on. the one where you change settings

you may have to turn off UAC to do this, also. more can be found on this and perhaps potential problems solved here:

http://www.realtime-vista.com/administration/2007/04/disabling_data_execution_preve.htm


also it should be noted that DEP is generally viewed as a critical security component of Windows, and one form or another of it has been present in versions of Windows since Windows has been around. or at least since Windows '98 or w/e

its just never been so....intrusive before :\